[Snort-users] XNS or RPC

shawn . moyer shawn at ...1184...
Mon Mar 12 14:52:20 EST 2001


> 12:00:56.913056 dcs.ufla.br.737 > francis.williams.edu.sunrpc:  udp 56

tcpdump format is host.port, so sunrpc (111) is the dest port, with 737
as the source port.

not sure what the "udp 56" bit on the end means, looking for it right
now, I'm guessing it's an rpc services / portmap-type doodad.




--shawn

-- 

s h a w n   m o y e r
shawn at ...1184...

The universe did not invent justice; man did. 
Unfortunately, man must reside in the universe.

                                        -- Zelazny




More information about the Snort-users mailing list